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NODE, METHOD AND COMPUTER READABLE MEDIUM FOR INSERTING 
AN INTRUSION PREVENTION SYSTEM INTO A NETWORK STACK 

ABSTRACT OF THE INVENTION 

5 A node of a network running an intrusion detection system, the node 

comprising a central processing unit, a memory module for storing data in machine 
readable format for retrieval and execution by the central processing unit, a database 
for storing a plurality of machine-readable network-exploit signatures, an operating 
system comprising a network stack comprising a protocol driver, a media access 

10 control driver and an instance of the intrusion detection system implemented as an 
intermediate driver and bound to the protocol driver and the media access control 
driver is provided. A method of filtering data at a node of a network comprising 
binding an intrusion prevention system directly to a media access control driver of a 
network stack of a node of the network is provided. A computer-readable medium 

15 having stored thereon a plurality of instructions, including a set of instructions for 
filtering network data, to be executed, said set of instructions, when executed by a 
processor, cause said processor to perform a computer method of binding an intrusion 
prevention system with a media access control driver upon initialization of an 
operating system of the computer is provided. 
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